Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
67483db647c14aa0459c834b6ede802879d7fdefd042629d6d3175e6ebaf193b
-
Size
138KB
-
Sample
240630-2c418a1cjq
-
MD5
7e5a400320796d12bfabfd8e9043305d
-
SHA1
efa6e2d28f6912de7b4be33c4126ea507dd6bc74
-
SHA256
67483db647c14aa0459c834b6ede802879d7fdefd042629d6d3175e6ebaf193b
-
SHA512
3ba7b004270a168ef319b4767311957b4cae15a185530085fad71f4399c5b7af7174c75c2da1bd209e759821a635afc74c50ddcbe42453b54541e26329035616
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCI7ZyqaFAxTWH1++PJHJXA/Os+:enaypQSoskvnaypQSoskP
Behavioral task
behavioral1
Sample
67483db647c14aa0459c834b6ede802879d7fdefd042629d6d3175e6ebaf193b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
67483db647c14aa0459c834b6ede802879d7fdefd042629d6d3175e6ebaf193b.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
67483db647c14aa0459c834b6ede802879d7fdefd042629d6d3175e6ebaf193b
-
Size
138KB
-
MD5
7e5a400320796d12bfabfd8e9043305d
-
SHA1
efa6e2d28f6912de7b4be33c4126ea507dd6bc74
-
SHA256
67483db647c14aa0459c834b6ede802879d7fdefd042629d6d3175e6ebaf193b
-
SHA512
3ba7b004270a168ef319b4767311957b4cae15a185530085fad71f4399c5b7af7174c75c2da1bd209e759821a635afc74c50ddcbe42453b54541e26329035616
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCI7ZyqaFAxTWH1++PJHJXA/Os+:enaypQSoskvnaypQSoskP
Score9/10-
Renames multiple (658) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-